[Rtir] Constituencies in RTIR/custom fields

[Peter Bates]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello all

On 13/11/2013 16:07, Kevin Falcone wrote:
> Either pre-populate it or change it to a freeform field, although that
> may act weirdly with the built in reporting.  Try it and see.
> Tools -> Configuration -> Custom Fields

I'll give this a go - Custom Fields shows that there are two
'Customer' fields, one is 'Select multiple values' (for the IR queue) and the
other is 'Select one value' (for the Investigations queue).

Is it not possible to just have one if I'm going to try
and populate a list?

Apologies for this - I'll read the workflow document again.
The majority of our work here is manual response to IDS alerts
from which we throw an Incident and then into an Investigation.

- -- 
Peter Bates
Senior Information Security Officer   Phone: +44(0)2076792049
Information Services Division	      Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSg61oAAoJELhVoVpEMS6R9MkH/0T0fTpi4iHpKpBZfe+g04DG
ef+0uvlwhhgO4l/EJQkMNBm43hx7nBX4B7STdCWf/CDLE57qR0blXf0T6Yg/uS+c
A3QtYnPH9BfkFtsof6mXDFFzClxxhIfdbESJoJwrZ7GpXT9acREj7Z5hoMxDOQSo
tmPcGsU6ONAz4N9N+cbQ+fY2E/lW4RxHx06UqdFfwGgwyHhc1LSH2+N8V9mi6HSI
d6C+IvECX7Ce8KcUDDV2Qn2+HNdFS8rZIaXuFJp/+9fui9Teu8LsBJeBZWuu0CKA
MqJGCtMWP0cIJRNZ9KHJO+yVhmkEVlvB3A6WCmPXTE9o0iWy/fRLxENSJeIrYTw=
=HmAW
-----END PGP SIGNATURE-----